Method and apparatus for placing automated service calls for postage meter and base

ABSTRACT

A meter and/or base coupled to one or more modems automatically places a service call to a service center upon detection of particular ones of detected faults. Diagnostic and test software periodically test the meter and/or base to ensure that the meter and/or base operate in an expected manner. Upon detection of a hard fault, a service call is placed to the service center and pertinent diagnostic data (e.g., the error code) is transmitted to allow the service center to promptly and properly respond to the call. For soft faults, the meter can resume operation if the detected fault clears up

BACKGROUND OF THE INVENTION

The present invention relates generally to postage metering systems, andmore particularly to a method and apparatus for placing an automatedservice call for postage meter and base.

A postage meter allows a user to print postage or other indicia of valueon envelopes or other media. The postage meter can be leased or rentedfrom a commercial group (e.g., Neopost). Typically, the user purchases afixed amount of value beforehand and the meter is programmed with thisamount. Subsequently, the user is allowed to print postage up to theprogrammed amount.

Because the meter is capable of printing postage having a value,security is critical to prevent unauthorized use. The meter typicallyincludes a print mechanism and mechanical arrangements and/or electroniccontrol circuitry that direct the operation of the print mechanism. Theprint mechanism and control circuitry are usually enclosed in a securedhousing that prevents tampering with the meter and unauthorized accessby anyone except for authorized factory technicians. The controlcircuitry can contain sensors that detect tampering with the meter andflag such condition. Examples of secured postage meters are disclosed inU.S. Pat. No. 4,742,469, entitled “ELECTRONIC METER CIRCUITRY”, issuedMay 3, 1988, and U.S. Pat. No. 4,484,307 entitled “ELECTRONIC POSTAGEMETER HAVING IMPROVED SECURITY AND FAULT TOLERANCE FEATURES”, issuedNov. 20, 1984, both assigned to the assignee of the present inventionand incorporated herein by reference.

With the advent of electronic control circuitry, meter security istypically provided by digital signature, encryption, and othertechniques. These techniques allow for electronic detection of metertampering, e.g., attempts to modify the normal operation of theaccounting registers used to store value.

The electronic control circuitry also enables the meter to perform otherdiagnostic functions. For example, the meter of the '469 patent is ableto detect component failures within the meter and to flag suchconditions.

The meter of the '469 patent has the ability to detect multiple types offailure, e.g., “hard” and “soft” faults. Hard faults include failuresthat threaten the security of the system and/or failure of importanthardware. When such faults are detected, a fault code is written into amemory and the meter is locked to prevent further operation until it hasbeen returned to the factory for service. An error message is thendisplayed on a display to warn the user of the problem and to prompt theuser to make a service call to the factory or service center. The userthen places the service call through a conventional telephone system.

Soft faults include conditions that pose no potential threat to thesecurity or integrity of the meter. Soft faults can include conditionsthat are defined in the software as temporary or transitory in nature.For soft faults, the meter displays the error code on the display,writes the error code to memory for later diagnostics, and enters a loopin which it monitors the detected failure condition. The display canprompt the user to make a service call. If the failure conditiondisappears, the meter resumes operation.

The error reporting mechanism of currently available meters tends to becrude in nature. In some meter designs, the display screen is limited toa few alphanumeric characters, just enough to report the error code. Theuser and service technician then reference a chart that accompanies themeter to determine the type of failure based on the reported error code.In other meter designs, the meter displays an error message such as“Call Service”. However, in all these designs, the user must make thenecessary service call.

This reporting mechanism is inadequate for a number of reasons. First,the fault condition may not be noticed by the user in a timely mannerand the reporting delay can result in loss of use to the user, andpossible income to the postal service. Second, the user may be aware ofthe error display but may not be knowledgeable enough to initiate theservice call. This is particularly true for meter designs that simplydisplay the fault's error code. Third, to provide a higher level ofservice, the meter lessor has a strong interest to know when a meter hasbeen tampered with or is non-functional so that corrective actions canbe taken immediately.

SUMMARY OF THE INVENTION

The present invention provides method and apparatus for placingautomated service calls for a postage meter and base. In oneconfiguration, the meter is a stand-alone unit that couples to a modem.In another configuration, the meter couples to the base and shares amodem coupled to the base. In yet another configuration, the metercouples to the base and each unit couples to an associated modem thatconnects the corresponding unit to a service center. The meter cancommunicate with the base through a predetermined protocol. The modemconnects the meter and/or the base to the service center through awireline or wireless transmission system.

In one embodiment, the meter contains diagnostic software thatperiodically checks the meter to ensure that the meter is operating inan expected manner. If a hard fault is detected, the meter initiates aservice call to the service center and transmits the pertinentdiagnostic data (e.g., the error code) to allow the service center topromptly and properly respond to the call. For other faults, the metercan attempt automatic and/or manual reset for a predetermined number oftimes before declaring a hard fault.

In another embodiment, the base contains test software that periodicallychecks the meter to ensure proper operation of the meter. If a fault isdetected, the base can attempt to reset the meter hardware. If the resetfails, the base can initiate a service call to the service centerthrough its own modem and transmits the pertinent diagnostic data. Theservice call can be made in the case of a hard fault, for example.

In yet another embodiment, the base contains diagnostic software thatperiodically checks the base to ensure proper operation of the base. Ifa fault is detected, the base can prompt the operator to fix serviceablefaults. Otherwise, the base initiates a service call to the servicecenter and transmits the pertinent diagnostic data.

The detected fault can be classified into one or more fault types. Forexample, the fault can be classified as “hard” or “soft” fault. Themeter and base then initiate actions based on the type of faultdetected. For hard fault, the meter is preferably disabled from furtheroperation until it has been serviced. For soft fault, the errorcondition can be monitored and the meter be allowed to resume operationif the fault disappears.

The foregoing, together with other aspects of this invention, willbecome more apparent when referring to the following specification,claims, and accompanying drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a block diagram illustrating several possible configurationsof a postage metering system;

FIG. 2 is a block diagram illustrating the basic subsystems of oneembodiment of the postage meter;

FIG. 3 is a flow diagram illustrating the detection and reporting ofmeter faults by the meter;

FIG. 4 is a flow diagram illustrating the detection and reporting ofmeter faults by the base; and

FIG. 5 is a flow diagram illustrating the detection and reporting ofbase faults by the base.

DESCRIPTION OF THE SPECIFIC EMBODIMENTS System Overview

A postage metering system can be designed in one of many configurations.In one configuration, a postage meter operates as a stand-alone unit andcouples to a modem. The modem can communicate with one or more of thefollowing entities: (1) a service center, (2) a central dispatchfacility, (3) postal authorities, (4) the manufacturer, and the like.Hereinafter, these entities are collectively referred to as the “servicecenter”. Thus, the term service center is used to refer to any entitythat may have a need or desire to know about, or an ability to act on, aproblem with a postage metering system.

In another configuration, the postage meter is a secured module thatcouples to a mailing machine base and functions in conjunction with thebase. The meter communicates with the base through a software protocol.One such protocol is disclosed in the aforementioned U.S. Pat. No.4,484,307. In one variant of this configuration, the meter is notdirectly coupled to a modem and connects to the service center through amodem in the base. In a another variant, the meter and base couple torespective modems and are able to independently communicate with theservice center through the respective modems. The meter and base canalso operably couple to the other unit's modem, i.e., through thesoftware protocol between the units, so that if one modem fails, theremaining modem can be used by both units. For example, if the modemcoupled to the meter fails, the meter is still able to communicate withthe service center through the modem coupled to the base. Thiscross-coupling feature provides added redundancy and increases systemreliability.

As used herein, “meter” generically refers to (1) a postage meter, (2) asecured module, (3) a secure metering device (SMD), and others. An SMDis a class of computer peripherals that performs the security functionsof postage metering systems. Examples of SMD are closed system secureddevice (CSSD) and postage secured device (PSD). Similarly, as usedherein, “base” generically refers to (1) a mailing machine base, (2) acomputer, and others.

FIG. 1 is a block diagram illustrating several possible configurationsof a postage metering system 100. Postage metering system 100 includes ameter 120 coupled to a base 130. Base 130 couples to a modem 132. Meter120 can also couple to an associated modem 122. FIG. 1 illustrates someexample configurations of postage meter system 100. Other configurationscan be designed, as described above.

The modems can be a wireline connection, such as a telephone companyconnection using a standard telephone line, or a wireless connection.The modem can provide a direct connection to the service center or anindirect connection through a communication network, such as theInternet. Through the modem, the meter and the base are able to placeautomatic service calls to the service center.

It may be desirable to use a postage metering system, such as postagemetering system 100, in a mobile environment. For example, the postagemetering system may be moved from site to site by the user, and somesites may not be equipped with a wireline connection. Also, the servicecenter may determine that it is more efficient to operate mobile serviceteams. For these reasons, it is advantageous to have a postage meteringsystem that is able to communicate to the service center using awireless link. One example of a wireless modem link is a wirelessservice dispatch system.

FIG. 2 is a block diagram illustrating the basic subsystems of oneembodiment of meter 120. Meter 120 includes a processor 210, a memory212 for storing accounting information and/or program codes, a controlcircuit 214, a print mechanism 216 for printing value indicia (such aspostage), a display 218 for displaying messages, an input device 220 forreceiving commands from a user and/or service technician, and an I/Ocontroller 222 for interface to a base and/or a modem. Control circuit214 receives and generates various timing and validation signals toprevent unauthorized actuation of print mechanism 216 and theunauthorized writing into accounting registers in memory 212.

Processor 210 couples to memory 212, control circuit 214, printmechanism 216, display 218, input device 220, and I/O controller 222.Control circuit 214 also couples to memory 212 and print mechanism 216.Processor 210, memory 212, control circuit 214, and print mechanism 216can be enclosed inside a secured and tamper resistance housing 230.

Processor 210 directs the operation of meter 120 and operates accordingto a program stored in an associated read-only-memory (ROM) and/orrandom-access-memory (RAM). These memories may be physically separateintegrated circuits (e.g., memory 212) or may be integrated withinprocessor 210. Processor 210 can be a microprocessor, a microcomputer, amicrocontroller, an applications specific integrated circuit, a digitalsignal processor, or the like. The operation of meter 120 is furtherdescribed in the aforementioned U.S. Pat. No. 4,742,469.

Another example of a design of a postage meter is disclosed in U.S. Pat.No. 5,612,884 entitled “REMOTE METER OPERATION”, issued Mar. 18, 1997,assigned to the assignee of the present invention and incorporatedherein by reference. The meter disclosed in the '884 patent includes aninput/output (I/O) port and is capable of communication with an externaldevice, e.g. a modem. Generally, the inventive concept described hereincan be applied to any meter design that supports communication with anexternal device.

System Operation

The operation of the postage meter is monitored periodically. Diagnosticsoftware located within the meter and/or the test software locatedwithin the base can poll various subsystems of the meter and report anydetected failure or fault. Furthermore, various sensors within the metercan also detect faults and report these conditions as they occur.

In one embodiment, the meter contains diagnostic software and performsperiodic tests. When the meter detects any of a number of specified hardfaults, it automatically places a service call via its own modem. Thisembodiment allows the meter to act as a stand-alone unit capable ofdetecting and reporting failure on its own. The service call can includepertinent diagnostic data such as: (1) the detected error code, (2) themodel/serial number of the meter, (3) the location of the meter, (4) thetime the error is detected, (5) the time (or cycles) since the lastinspection, (6) license or lease status, (7) general failureclassification, (8) suspect components, and others. The diagnostic dataallows the service center to diagnose the failure and to promptly andproperly respond to the call.

In another embodiment, the base periodically tests the meter with testsoftware. If the test shows the meter to be installed on the base butnon-functional due to a hard fault, the base initiates a service call onbehalf of the meter via the base modem. Again, the base can transmit thepertinent diagnostic data, such as the detected error code, to allow theservice center to properly respond to the call. This embodiment providesfor an automated service call even when the meter is disabled to anextent that it cannot make the call itself. The added level ofredundancy provides improved service and reliability.

In yet another embodiment, the base contains diagnostic software andperforms periodic tests of its hardware. When the base identifies anyone of a number of specified faults that are not serviceable by anoperator, it initiates a service call through its modem. The servicecall can include the pertinent diagnostic data to allow the servicecenter to properly respond.

As will be obvious to one skilled in the art, the various embodimentsdescribed above can be combined to provide the desired level offunctionality. For example, the meter and the base can each containdiagnostic software for detection of its respective faults. Also, thepostage metering system can embody all three of the embodimentsdescribed above such that the meter can be tested by its own diagnosticsoftware and by the base test software, and the base can be tested byits own diagnostic software.

As described herein, the meter diagnostic software, the base testsoftware, and the base diagnostic software are routines programmed toperform the necessary operations on the processor within the associatedmeter and base. The software includes routines that perform detection,diagnosis, and notification of various system errors. The errors includetampering and/or malfunctions of the hardware as well as software. Thesoftware can comprise microcode that can be stored or hardwired withinthe processor. Various implementations of the software can becontemplated by those skilled in the art and are within the scope of thepresent invention.

Faults can also be detected by sensors within the meter. One example isa cover switch that activates when the secured cover of the meter isdislodged or any electronic hardware probing is attempted. Anotherexample is a device that detects when the accounting registers aremodified without authorization. Although not shown in FIG. 2, thesesensors couple to the associated subsystems to which they apply and sendsignals to control circuit 214 or processor 210 when activated.

Fault States

During normal operation, the processor within the meter and/or baseperforms various checks on the memory, the printing mechanism, and theprocessor itself. The detected faults can be classified into one or moretypes, e.g., based on the severity of the fault, so that appropriateaction can be taken. In one embodiment, the faults are classified as“hard” and “soft” faults.

In one embodiment, hard faults are defined as those that threaten thesecurity of the system and those that render the meter inoperable. Thus,hard faults include detection of (1) tampering with the secured housing,(2) attempts to set the accounting unit to an unauthorized value, (3)attempts to prevent the operation of the accounting unit during thenormal print cycle, (4) failure of the sensors, (5) failure of criticalcomponents (e.g., the printing 30 mechanism, the memory, the processor),(6) erroneous accounting by the accounting unit (e.g., that is detectedby an error-checking algorithm), and others.

Soft faults are defined as those that neither (1) threaten the securityor integrity of the system nor (2) cause the meter to be inoperable.Soft faults can be all other detected faults that are not classified ashard. Soft faults include abnormal conditions that are believed to betransitory in nature.

The faults that are detected by the meter and base depend on theparticular design of the postage meter system. An example of a postagemeter design and the list of detected hard and soft faults for the meteris described in the aforementioned U.S. Pat. No. 4,742,469. The lists ofhard and soft faults described therein are only used to illustrate byway of example, and are not construed as limitations of the presentinvention.

Meter Faults Detected by the Meter

FIG. 3 shows a flow diagram 300 illustrating the operation of thediagnostic routine for detection and reporting of meter faults by themeter. At a step 310, the meter operates in the normal manner.Periodically, at a step 312, the meter determines whether a meter faulthas been detected. If no meter faults are detected, the meter returns tostep 310 and resumes normal operation. Otherwise, if a meter fault isdetected, the meter then determines whether it is a hard fault, at astep 314. If a hard fault is detected, the meter proceeds to a step 350where it places a service call to the service center using its modem orthe base modem. The service call can include diagnostic details (e.g.,the service code) that assist the service center to properly respond.

If a hard fault is not detected by the meter at step 314, the meter thendetermines, at a step 316, if the fault is one that allows for automaticreset. If automatic reset is allowed, the meter proceeds to a step 318where it performs the automatic reset. The automatic reset can includeany operations that the meter is allowed to retry. If the fault is notdetected again after the retry, the error flag can be cleared and/or theprocessor can be reset (e.g., by the software) and normal operation isresumed. If the meter determines, at a step 320, that the automaticreset is successful it resumes normal operation, at a step 342.Otherwise, if the automatic reset is unsuccessful the meter incrementsan auto retry counter, at a step 322. At a step 324, the meterdetermines if the auto retry counter equals the allowable maximumnumber. If the answer is no, the meter returns to step 318 to performanother automatic reset. Otherwise, if the auto retry counter equals themaximum, the meter proceeds to a step 326.

Step 326 can be implemented in one of several options. In the firstoption, the meter proceeds to a step 330 and requests a manual reset ifthe automatic reset fails. One example of a manual reset is to power themeter off/on. In the second option, if automatic reset is unsuccessful,the meter treats the detected fault as a hard fault and proceeds to astep 340.

If automatic reset is not allowed for the detected fault, as determinedat step 316, the meter proceeds to a step 330 where it displays a manualreset prompt, e.g., “Reset Machine”, to induce a manual reset from theuser. The meter then waits for the manual reset at a step 332. Upondetection of a successful reset, at a step 334, the meter resumesoperation, at step 342. If the manual reset is not successful, the meterincrements a manual retry counter, at a step 336. If the meterdetermines, at a step 338, that the manual reset counter is less thanthe allowable maximum number, the meter returns to step 330 and promptsfor another manual reset. Otherwise, if the manual reset counter equalsthe maximum, the meter proceeds to step 340 where it declares thedetected fault as a hard fault. The meter then proceeds to step 350where it places an automated service call.

Meter Faults Detected by the Base

FIG. 4 shows a flow diagram 400 illustrating the operation of the testroutine for detection and reporting of meter fault by the base. At astep 410, the meter operates in the normal manner. At a step 412, thebase determines, through its test software or through a report of thefault by the meter, whether a meter fault has been detected. If no meterfaults are detected, the base returns to step 410 and wherein the metercontinues to operate in the normal manner. However, if a meter fault isdetected, the base performs a hardware reset of the meter or,alternatively, commands the meter to perform a reset of the meterhardware, at a step 414. One method of performing hard reset is to cyclethe meter power off/on. The base then determines, at a step 416, whetherthe fault still exists after the hardware reset. If no faults aredetected, the base proceeds to a step 428 wherein the meter resumesnormal operation.

If the fault persists after the hardware reset, the base reads the faultcode, at a step 418. If a hard fault is detected, at a step 420, thebase proceeds to a step 440 where it places a service call using itsmodem. The base can report the fault code and the diagnostic details toassist the service center to properly respond. If the detected fault isnot hard, an error message is displayed, at a step 422, to induce a userfix from the user or service technician. The base then waits for theuser fix, at a step 424. Some examples of user fixes are: (1) replacethe inker, (2) add toner, (3) clean printwheels, (4) set date, andothers. Generally, the user fixes are dictated by the hardware designand can include anything that periodically needs attention.

If the base detects that the meter is fixed, at a step 426, the baseproceeds to step 428. Otherwise, the base increments a user fix counter,at a step 430. If the base determines, at a step 432, that the user fixcounter is less than the allowable maximum number, the base returns tostep 422 to again display the error message. Otherwise, if the user fixcounter equals the maximum, the base proceeds to step 440 where itplaces an automated service call.

Base Faults Detected by the Base

FIG. 5 shows a flow diagram 500 illustrating the operation of thediagnostic routine for detection and reporting of base faults by thebase. At a step 510, the base operates in the normal manner.Periodically, at a step 512, the base determines whether a base faulthas been detected. If no base faults are detected, the base returns tostep 510 and resumes normal operation. Otherwise, if a base fault isdetected, the base then determines whether the detected fault isoperator serviceable, at a step 514. If the fault is not operatorserviceable, the base proceeds to a step 526 where it places a servicecall using its modem. The base can report the fault code and thediagnostic details. Alternatively, if the detected fault is serviceable,the base prompts the operator, at a step 516, to perform service. Thebase then waits for the operator fix, at a step 518. The operator fixescan be those described above.

At a step 520, the base determines whether the operator fix clears thefault. If the answer is yes, the base proceeds to a step 530 where itresumes operation. Otherwise, the base proceeds to a step 522 where itincrements an operator fix counter. At a step 524, if the basedetermines that the operator fix counter is less than the allowablemaximum number, the base returns to step 516 to again prompt theoperator. Otherwise, if the operator fix counter equals the maximum, thebase proceeds to step 526 where it places an automated service call.

The flow diagrams shown in FIGS. 3-5 are one example of each of thethree embodiments described herein. It will be obvious for those skilledin the art to modify the flow diagrams to match the particular design ofthe meter and base. Furthermore, the flow diagrams can be tailored toparticular system goals and requirements.

The automated service call of the present invention allows for a robustdesign of the postage metering system. Traditionally, a fault related toa breach in security causes the meter to lock until a service call hasbeen made. A design choice must be made a priori whether a particularfault state should cause the meter to lock up (causing downtime) or beallowed to operate (possibly compromising security).

With the automated service call, the postage metering system can bedesigned with varying levels of sensitivity in security and operabilitydetection. The detection of one of a set of specified faults causes themeter and/or the base to report the fault to the service center. Theservice center can perform diagnostics using the reported diagnosticdata. Furthermore, the service center can perform additional diagnosticsof the meter and/or base through the modem link, to assess the severityof the condition. For example, the service center can shut down a meterexperiencing a set of faults, each of which by itself may not be severeenough to justify the shut down. The service center can also take intoaccount additional data known to it in assessing the fault. For example,the center may shut down a meter experiencing a soft fault, if thatmeter is past due for inspection or maintenance.

The automated service call of the present invention is especially suitedfor used in applications that require the reporting of meter failures.For example, the U.S. Postal system mandates that a postage meterfailure be reported quickly after a failure detection. The automatedservice call by the meter and/or base can be automatically logged by theservice center. The service center then uses the data to prepare therequired report to the governing authority.

The previous description of the preferred embodiments is provided toenable any person skilled in the art to make or use the presentinvention. The various modifications to these embodiments will bereadily apparent to those skilled in the art, and the generic principlesdefined herein may be applied to other embodiments without the use ofthe inventive faculty. For example, the flow diagrams can be modified tomatch the particular postage meter system design or goals. Thus, thepresent invention is not intended to be limited to the embodiments shownherein but is to be accorded the widest scope consistent with theprinciples and novel features disclosed herein.

What is claimed is:
 1. A postage metering system for placing anautomated service call to a service center comprising: a meter; a basecoupled to the meter, the base including a processor; and a modemcoupled to the base; wherein the processor runs diagnostic softwareconfigured to perform periodic checks of the base to detect security andbase failures, the base sends a service call via the modem upondetection of particular ones of the detected failures.
 2. The system ofclaim 1 wherein the failures are categorized into hard and soft faults.3. The system of claim 1 wherein the modem is a wireless connection. 4.The system of claim 2 wherein the automatic service call is performedupon detection of hard faults.
 5. The system of claim 2 wherein anoperator fix is requested upon detection of soft faults.
 6. The systemof claim 2 wherein the meter performs automatic reset upon detection ofsoft faults.
 7. The system of claim 6 wherein the meter resumesoperation upon a successful automatic reset.
 8. The system of claim 2wherein the meter prompts for a manual reset upon detection of softfaults.
 9. The system of claim 8 wherein the meter resumes operationupon a successful manual reset.
 10. The system of claim 2 wherein themeter is disabled upon detection of hard faults.